3 ms·
I have a password strategy I like, and I'm gonna share it because you might like it too. * Create a master password root. Do not write it down anywhere - memor
by wly_cdgr 4y ago
I have a password strategy I like, and I'm gonna share it because you might like it too.
* Create a master password root. Do not write it down anywhere - memorize it
* For every account that requires a password, add a unique suffix to the root
* Write down the suffixes in a file locked with the master password root
* Do not use a password manager. Enter passwords manually; since they all share the same master root, you are very unlikely to ever forget it
* If you do forget it anyway despite all this, you probably have bigger problems. Or maybe not, but then again, none of this shit matters anyway
- red0point 4y agoSo if any single one of your used services leaks your password, you‘re essentially screwed since the root can be determined. Have you heard of haveibeenpwned.com?
- wly_cdgr 4y agoOk, so some guy in Croatia now knows the root, so what? How does that help them? They can't access the other suffixes without physical access to my home computer. Not to mention they have no idea which part is the root and which part is the suffix
- neop1x 4y agoI used to use this as well (with site-specific part in the middle, not as a suffix) but then switched to Bitwarden and random passwords as some suffixes were not unique and with 300+ services it started being annoying to type over and over again. Also a more sophisticated attacker could intercept two passwords and see the similarity, then bruteforce just the difference.